[
https://issues.apache.org/jira/browse/HBASE-28247?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17794039#comment-17794039
]
Istvan Toth commented on HBASE-28247:
-------------------------------------
This is the sun-net.dns stack trace:
{noformat}
Failed construction RegionServer
java.lang.IllegalAccessError: class
org.apache.hadoop.security.SecurityUtil$QualifiedHostResolver (in unnamed
module @0x2b546384) cannot access class sun.net.dns.ResolverConfiguration (in
module java.base) because module java.base does not export sun.net.dns to
unnamed module @0x2b546384
at
org.apache.hadoop.security.SecurityUtil$QualifiedHostResolver.<init>(SecurityUtil.java:589)
at
org.apache.hadoop.security.SecurityUtil.setTokenServiceUseIp(SecurityUtil.java:127)
at
org.apache.hadoop.security.SecurityUtil.setConfigurationInternal(SecurityUtil.java:100)
at
org.apache.hadoop.security.SecurityUtil.<clinit>(SecurityUtil.java:86)
at
org.apache.hadoop.security.UserGroupInformation.initialize(UserGroupInformation.java:326)
at
org.apache.hadoop.security.UserGroupInformation.ensureInitialized(UserGroupInformation.java:314)
at
org.apache.hadoop.security.UserGroupInformation.isAuthenticationMethodEnabled(UserGroupInformation.java:409)
at
org.apache.hadoop.security.UserGroupInformation.isSecurityEnabled(UserGroupInformation.java:403)
at
org.apache.hadoop.hbase.security.User$SecureHadoopUser.isSecurityEnabled(User.java:373)
at
org.apache.hadoop.hbase.security.User$SecureHadoopUser.login(User.java:352)
at org.apache.hadoop.hbase.security.User.login(User.java:223)
at
org.apache.hadoop.hbase.security.UserProvider.login(UserProvider.java:209)
at
org.apache.hadoop.hbase.regionserver.HRegionServer.login(HRegionServer.java:784)
at
org.apache.hadoop.hbase.regionserver.HRegionServer.<init>(HRegionServer.java:634)
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77)
at
java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at
java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:499)
at
java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:480)
at
org.apache.hadoop.hbase.regionserver.HRegionServer.constructRegionServer(HRegionServer.java:3156)
at
org.apache.hadoop.hbase.regionserver.HRegionServerCommandLine.start(HRegionServerCommandLine.java:58)
at
org.apache.hadoop.hbase.regionserver.HRegionServerCommandLine.run(HRegionServerCommandLine.java:82)
at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:81)
at
org.apache.hadoop.hbase.util.ServerCommandLine.doMain(ServerCommandLine.java:140)
at
org.apache.hadoop.hbase.regionserver.HRegionServer.main(HRegionServer.java:3174)
{noformat}
> Add java.base/sun.net.dns and java.base/sun.net.util export to jdk11 JVM
> test flags
> ------------------------------------------------------------------------------------
>
> Key: HBASE-28247
> URL: https://issues.apache.org/jira/browse/HBASE-28247
> Project: HBase
> Issue Type: Bug
> Components: java
> Affects Versions: 2.6.0, 3.0.0-alpha-4, 2.4.17, 2.5.6
> Reporter: Istvan Toth
> Assignee: Istvan Toth
> Priority: Minor
>
> While testing with JDK17 we have found that we need to add
> {noformat}
> --add-exports java.base/sun.net.dns=ALL-UNNAMED
> --add-exports java.base/sun.net.util=ALL-UNNAMED
> {noformat}
> on top of what is already defined in _hbase-surefire.jdk11.flags_ , otherwise
> RS and Master startup fails in the Hadoop security code.
> While this does not affect the test suite (at least not the commonly run
> tests), I consider hbase-surefire.jdk11.flags to be an unoffical resource to
> getting HBase to run on newer JDK versions.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
